Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
File: 3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: kxByjHOhvO++0gqDSVRrGMUuFGVovD2Vvxo9i3GJIRA=
Subject key identifier: 6E:1B:EC:FD:AA:54:1F:C8:FA:2D:21:90:EC:59:0F:0E:19:D4:CF:1C
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 14FF6830CB4693B59B1E33DA82A7FFCC3B24D085
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:52 +0000
ROA not before: Mon 14 Oct 2024 01:44:52 +0000
ROA not after: Mon 13 Oct 2025 01:49:52 +0000
asID: 28270
IP address blocks: 186.219.152.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:ff:68:30:cb:46:93:b5:9b:1e:33:da:82:a7:ff:cc:3b:24:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:52 2024 GMT
Not After : Oct 13 01:49:52 2025 GMT
Subject: CN=6E1BECFDAA541FC8FA2D2190EC590F0E19D4CF1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:06:6a:4a:96:bb:e9:18:dd:f3:c2:8c:ba:
5f:86:f7:32:42:07:ad:7a:01:54:dd:bb:01:dc:6c:
13:10:f5:82:b1:b7:a9:a7:18:37:eb:7d:76:87:de:
06:bb:73:77:fa:cc:cf:49:87:b1:09:29:d5:a0:a7:
eb:9c:80:91:bb:df:31:1a:77:58:24:fe:e7:dd:98:
2b:0f:1e:d4:b2:d7:af:fe:71:81:f2:e2:a0:4e:18:
7e:f0:8f:4a:d9:ca:c8:7b:05:89:f6:86:c5:81:ce:
a3:8f:74:2f:3a:df:6d:8c:04:2e:e6:66:41:14:a8:
bb:5a:f4:1b:a5:65:09:64:c3:21:6e:2f:d4:ac:c9:
c2:56:0a:99:76:fa:c2:26:76:f9:e1:46:fb:01:99:
7d:9d:30:02:ae:2a:8d:50:ca:d4:92:1a:cf:ae:c9:
b0:7a:da:8c:6d:3c:e9:7a:9f:b3:a5:d7:47:6b:03:
f1:c3:5e:fa:60:76:73:c8:55:b4:0f:fd:4e:e9:fd:
10:d5:e1:15:fb:41:80:37:9e:24:8d:09:df:52:26:
c3:09:39:0f:25:c5:99:d0:f0:a2:06:86:26:13:86:
7e:de:da:d3:8a:0a:95:4d:3f:cc:7f:21:17:b7:3f:
03:87:ee:45:c1:df:57:67:de:29:66:e9:39:f4:7a:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:EC:FD:AA:54:1F:C8:FA:2D:21:90:EC:59:0F:0E:19:D4:CF:1C
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3138362e3231392e3135322e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.219.152.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:db:92:a2:79:f1:b6:33:29:00:37:84:a5:6a:a2:db:b1:5e:
fa:81:ab:d6:17:c6:27:fc:6b:16:9a:5b:ee:2e:90:21:70:fa:
bb:10:77:9f:90:67:28:b1:a9:62:fc:24:f3:4f:23:15:71:5a:
34:fd:54:9f:07:b1:2a:b7:2c:db:4b:e4:f3:3c:83:31:ae:8e:
05:42:87:75:46:67:41:8b:77:08:3c:88:23:a0:f4:9a:a1:4a:
e2:59:b3:11:cb:61:85:b4:21:6f:b9:b9:bc:84:7c:b6:38:65:
50:ae:c4:95:4a:5a:84:33:ed:53:92:ba:f2:d8:28:b7:c4:9b:
58:25:8d:11:06:22:2b:3a:90:d2:75:42:27:1c:78:3f:2e:84:
ee:b0:47:81:d6:b5:3b:78:11:6e:b6:cf:00:53:49:1f:3c:7b:
dc:3f:0f:b2:fd:c9:b1:ba:f6:ea:86:21:8c:9f:fd:51:2e:41:
a7:c6:e9:c1:3d:c2:c2:04:4f:9d:3a:b3:95:a3:31:fd:c2:8c:
ff:e7:da:52:fb:08:a2:34:48:78:65:38:f3:c0:02:04:44:95:
dd:d5:a8:63:a8:3e:7d:ee:fb:85:b9:30:35:35:3f:71:b0:13:
86:a3:08:d3:2a:08:15:14:50:ce:db:59:66:bf:19:b4:ab:46:
5e:dc:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:48:32 2025 by rpki-client